Sysinternals Suite¶

Category: Sysinternals

Homepage: https://docs.microsoft.com/en-us/sysinternals/

Vendor: Microsoft

License: Sysinternals Software License Terms

Source: HTTP

Profiles: Full, Basic

File Extensions: .exe, .dll, .sys

Tags: windows, debugging, monitoring

Sysinternals Suite is a collection of utilities for Windows.

Tips¶

Sysinternals Suite is installed in .\mount\Tools\sysinternals.

Usage¶

Sysinternals Suite is a collection of utilities for Windows. It includes tools for process management, file system analysis, network monitoring, and more.

Sample Commands¶

• accesschk64.exe
• AccessEnum.exe
• ADExplorer64.exe
• ADInsight64.exe
• adrestore64.exe
• Autologon64.exe
• Autoruns64.exe
• autorunsc64.exe
• Bginfo64.exe
• CacheSet64.exe
• Contig64.exe
• Coreinfo64.exe
• Ctrl2cap.exe
• CPUSTRES64.exe
• Dbgview.exe
• Desktops64.exe
• disk2vhd64.exe
• DiskExt64.exe
• DiskMon64.exe
• DiskView64.exe
• du64.exe
• EfsInfo64.exe
• FindLinks64.exe
• Handle64.exe
• Hex2dec64.exe
• junction64.exe
• ldmdump.exe
• listdlls64.exe
• LiveKd64.exe
• LoadOrd64.exe
• LoadOrdC64.exe
• LogonSessions64.exe
• MoveFile64.exe
• notmyfault64.exe
• notmyfaultc64.exe
• ntfsinfo64.exe
• PendMoves64.exe
• pipelist64.exe
• portmon.exe
• ProcDump64.exe
• procexp64.exe
• Procmon64.exe
• PsExec64.exe
• PsFile64.exe
• PsGetsid64.exe
• PsInfo64.exe
• pskill64.exe
• pslist64.exe
• PsLoggedon64.exe
• PsLogList64.exe
• PsPasswd64.exe
• PsPing64.exe
• PsService64.exe
• psshutdown64.exe
• pssuspend64.exe
• RAMMap64.exe
• RDCMan.exe
• RegDelNull64.exe
• Reghide.exe
• RegJump.exe
• RootkitRevealer.exe
• ru64.exe
• SDelete64.exe
• ShareEnum64.exe
• ShellRunas.exe
• sigcheck64.exe
• streams64.exe
• strings64.exe
• Sync64.exe
• Sysmon64.exe
• tcpvcon64.exe
• TCPView64.exe
• Testlimit64.exe
• vmmap64.exe
• Volumeid64.exe
• whois64.exe
• WinObj64.exe
• ZoomIt64.exe

Sample Files¶

• N/A